WordPress.org

Ready to get started?Download WordPress

Forums

Social Login
Login via Steam Browser (2 posts)

  1. Datenkralle
    Member
    Posted 1 year ago #

    Hi,
    i tried to login in via my Steam-Webbrowser(Ingame). But it didn't work.
    When i use a other webbrowser like firefox or internet explorer, it works.
    Also i tried the options PHP FSockopen or HTTP Port 80 it didn't help.
    I think the most Steamuser want to Login via the Steambrowser. Because when you use a other browser you must check your email for a code, but with steambrowser you can login without ckecking your email.

    But i think the problem is when you create a steam account, steam didn't check the email. So a hacker can create a account with a email from a admin. So he can login in wordpress via steam without wordpress is checking the email. And when the option for "connecting accounts, if there is the same email" is on "Yes", the hackeraccount connect with adminaccount.

    I think you can solve this problem when wordpress is checked their emails via registration link or code. After these accounts can connect each other. So you can solve other problems.

    So i set the user setting for manual email input on "Yes". After this i logged in via steam with my firefox-webbrowser. Now he asked me for a email. After i put my email in, he tells me that the email is also used. Because i use the same email for my main account. Thats pitty, because there is no way to connect a steam account with a other account on wordpress.

    But when wordpress checked the email, that i put in, the steam account can connect with the other account.

    So it is possible to adjust or program the plugin, that it's possible to login via steam with steambrowser?

    http://wordpress.org/extend/plugins/oa-social-login/

  2. Claude
    Member
    Plugin Author

    Posted 1 year ago #

    Hi Datenkralle,

    So a hacker can create a account with a email from a admin. So he can login in wordpress via steam without wordpress is checking the email.

    No this is not possible. Our API knows whether the retrieved emails have been validated or not. Steam emails are not considered as validated and will never be used for account linking - even if the account linking option is enabled in the settings.

    So it is possible to adjust or program the plugin, that it's possible to login via steam with steambrowser?

    Thank you very much for this bug report. We will have a look!

    Regards,

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic